Assign user rights to a group in Active Directory
Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2
To assign user rights to a group in Active Directory
Open Domain Controller Security Policy.
In the console tree, click User Rights Assignment.
Where?
- Security Settings/Local Policies/User Rights Assignment
In the details pane, double-click the user right that you want to assign.
Click Add User or Group.
If the button appears dimmed, select the Define these policy settings check box.
Type the name of the group to which you want to assign this right.
Notes
To perform this procedure, you must be a member of the Domain Admins group or the Enterprise Admins group in Active Directory, or you must have been delegated the appropriate authority. As a security best practice, consider using Run as to perform this procedure. For more information, see Default local groups, Default groups, and Using Run as.
To open Domain Controller Security Policy, click Start, click Control Panel, double-click Administrative Tools, and then double-click Domain Controller Security Policy.
Information about functional differences
- Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.